URLhaus Database

You are currently viewing the URLhaus database entry for http://johnsonlam.com/download/available_2mrDRQvN_HPLd2diV1KP/guarded_space/zti_z84x/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435284
URL: http://johnsonlam.com/download/available_2mrDRQvN_HPLd2diV1KP/guarded_space/zti_z84x/
URL Status:Offline
Host: johnsonlam.com
Date added:2020-08-18 00:03:17 UTC
Last online:2020-10-07 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-07 01:30:06 UTC to noc-abuse{at}mschosting[dot]com)
Takedown time:50 minutes Wow (down since 2020-10-07 02:20:52 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19inf 2020_08_20 ID22671.docdoc 2c5b0a5c645d8ca87fd7a703e770536a91e2178a14a3b50980fc71231a5c9049Virustotal results 32.20%Heodo
2020-08-19REP-20200820-N871.docdoc 0cd31f3fe195cfa0c025d27c1cf6ad200d8228b2fff802412181fece4bbf5155Virustotal results 28.81%Heodo
2020-08-19DAT-20200820-5926.docdoc 18f2491dcef8d7f0113049e146994fc5a8fc1615ff0fbbd659fa0a5d580ea72dVirustotal results 28.07%Heodo
2020-08-19MES 2020_08_19 AD86707.docdoc c940432dc1875cdb1adfbda4eb2c3a23b3a10fd0a53cf12cc32e79389120b5d8Virustotal results 26.67%Heodo
2020-08-19mes_20200819_L5765.docdoc 7b1214f3fa1a87909df1dc2aaf3d66f4ef5ebe9cc2a8040bffa44e44e28ae36bVirustotal results 26.67%Heodo
2020-08-19ARC-CJZ302.docdoc 1a5032c8701a96210fcf5526730ee3db4924b92af58495bcfaed6912b1d48cb8Virustotal results 26.67%Heodo
2020-08-19Inf-20200819-TX639619.docdoc 7dc844f8716dcdfe52e129c179b48139c29cb20831bd719a02b8120135a7ddebVirustotal results 26.67%Heodo
2020-08-19REP ZWC715420.docdoc f7e9fa608f55e54940a272093c78974b3e2350594feb6bee7e0847ac03e975bdVirustotal results 27.12%Heodo
2020-08-19REP-20200819-AZA3615.docdoc 1974d9df785e9c234899f09030fb1e99b007709c6ed249e4e8b2fc080df7ff16Virustotal results 26.67%Heodo
2020-08-19file_20200819_340839.docdoc ad1cd733252039fe55df9241f672a3e0dc2435552a2f48e40f56477612916743Virustotal results 26.67%Heodo
2020-08-19arc-TCC83028.docdoc ccf7aa2ddbffb5627874d5d3a1595b112fc715c76264882477835efa5c64e0ebVirustotal results 26.67%Heodo
2020-08-19list-20200819.docdoc d54b881b142aa3ec2e3b816d4dc326d23176dee31c65f78ff9b9328f61aaedb9Virustotal results 27.12% Heodo
2020-08-19rep_8693.docdoc 4f49566c22cd95508f39368f73be4e9b6c9c8e504c519f2383cc00fb67d28c55Virustotal results 23.73%Heodo
2020-08-19doc 2020_08_19 21987.docdoc 66915150d26a0500bee5a47eef810f6d5ef9c9a9282973f17b3e434bac5600bfVirustotal results 21.67%Heodo
2020-08-19Inf 2020_08_19 527593.docdoc 0ce5e53c8098dbfc4fd1e58da405b66f8289522b964544eaa585a1094562edd9Virustotal results 22.03%Heodo
2020-08-19LIST_2020_08_19_48159.docdoc 017dedfe5d57e11c86048a8f6470f4d48573fc0bc581b8ef0a6e22c06169770aVirustotal results 20.69%Heodo
2020-08-19INF-2020_08_19-XJ01151.docdoc b4980748305d9329f376c996a7887e4cb40713c823693998d4360500c510062an/aHeodo
2020-08-19Doc 8280.docdoc 305cb6c8382b96303f2a72bf13d1c5396188b06612236babedc20ab620eddba1Virustotal results 20.00%Heodo
2020-08-19REP 20200819 6872.docdoc 02efef8ede900c86814ee2bdbd43c88bda71b970e85d0320bdb50feea29dc6baVirustotal results 18.33%Heodo
2020-08-19Mes-20200819-KMV222.docdoc fa59f15a4552911075dfed2943fc04b755430e1611628a0cd18370afad3e3e1dVirustotal results 19.67%Heodo
2020-08-19Arc-20200819-65035.docdoc aaadbe4b9d0ee93e968e9b335a70f43b7494e2f260e87ca8a08a211997111940Virustotal results 20.34%Heodo
2020-08-19Rep-20200819-HK0592.docdoc 8b3f4fadba7e503156606666e368e036a99962c1a2a7e3929067e86d385df235Virustotal results 20.00%Heodo
2020-08-19arc_20200819.docdoc ac5d6169036212c360d8f4232685f6664041d612f03126d5ae29a48dfdcf2d1dn/aHeodo
2020-08-19mes TUC487477.docdoc 963b5a5d7697620b406fa79e667784b136bd5f07ce3384a384b679bb1f046e65Virustotal results 18.33%Heodo
2020-08-19LIST 2020_08_19 517.docdoc fc3d622adccc98bf7aee3ff98037920892cf9ec8e29b6a2de393217d74499b7eVirustotal results 18.64%Heodo
2020-08-19ARC-HI5148.docdoc e9da8132017bc36f1448def9ba8b2ea44184e68bf955c08ba75f2560ade79372Virustotal results 18.33%Heodo
2020-08-19REP 2020_08_19 X9628.docdoc 355ae9ce7f18c1cd0e3f82cba9251b9b368cb11edb902fe09e6d8d4a471d5091Virustotal results 18.33%Heodo
2020-08-19list-144.docdoc 4798faf76258c8ed12cd2d43a683e3c56b6fadbcbc5b6e7a797ca73e76ed49dfVirustotal results 18.18%Heodo
2020-08-19Mes_20200819.docdoc 44116755a469545747d98ca4dad33a22c5565d571be3001cb95cb4971c532c3cVirustotal results 18.33%Heodo
2020-08-19dat B29356.docdoc 6694fe251d3d322846bd820435fba33e44ed217f3f9e2bf3a1ba2f71a2c8b4bcVirustotal results 18.33%Heodo
2020-08-19inf-20200819.docdoc 36ba95c1057a9ae52d37138e2d2e3d6a062e0c0aec687ece18259b238fd439b4Virustotal results 18.87%Heodo
2020-08-19File_212751.docdoc 7bf519b79d25cfda553295f5249aec90f7d5faa6374eca5930118e0bc0a59666Virustotal results 18.33%Heodo
2020-08-19Mes-7113.docdoc 286da6ddd48e8a7710a42e0b3a8176443ce264480609c7e8107f9c8ee598e1e9Virustotal results 18.64%Heodo
2020-08-19Arc.docdoc e6cfec7c5e5016b798a2d0838321003cab29be4fd7d6311ccb69c0be740618c7Virustotal results 18.33%Heodo
2020-08-19List-20200819-JT153874.docdoc 568b22f1a6fb077fd3828a09858b4bcd8401325c01f2aed85b3a39e12777cb35Virustotal results 18.64%Heodo
2020-08-19Mes_2020_08_19_UXB963.docdoc 82b2463c462ac62073f95ada6f8aa70c265d0d7ca216a36322994f2d464bda58Virustotal results 20.00%Heodo
2020-08-19Inf-0229.docdoc 6409ea14c150741b3551828dcbbc20e14505bdad2f9a8eee4f450a80878f6519Virustotal results 18.33%Heodo
2020-08-19File 20200819 7505.docdoc 2dea73b6391db01c0900ef660c75b0841dcb9fd8fd91c892a5faee2e9701606eVirustotal results 48.28%Heodo
2020-08-19Dat OMH11163.docdoc f4e30920b70f56cf729fbd18a0d60e33b391f7e5307d39b78d9852f9918b46ceVirustotal results 47.46%Heodo
2020-08-19file-20200819-OT5451.docdoc 09d725bc4314f587c3132842fc1d924a1ec4952620d18e32796d3797b90e66b0n/aHeodo
2020-08-19LIST-2020_08_19.docdoc 06cad41d0787e562a96ad8958e26b1f207b90cdf231201faa801225a7a259256Virustotal results 47.46%Heodo
2020-08-19Arc-2020_08_19-697244.docdoc 4d3b86d9dc87fa84b6283d3c9ef68a508bd41eb8f2930650cecf08f2ae86c2b3Virustotal results 47.46%Heodo
2020-08-19list_20200819_NAL369880.docdoc f6feee3a8137cb0cab6667842f06e07f96e54fc2f15ebe079dc30b4060d52452Virustotal results 46.67%Heodo
2020-08-19List 2020_08_19.docdoc e951848d42ae155a4f81c8c0ecd4f3164426f99a023d9c9bf841f130998a4668Virustotal results 46.67%Heodo
2020-08-19ARC 2020_08_19 IJX2061.docdoc 948a3065cb08ddc97ef33cce132fadb8de68441de9d0fb9cc30fad5fd39be2ccVirustotal results 45.76%Heodo
2020-08-19List-2020_08_19-G243954.docdoc 9f95680d93e52258b33600da99d066d953f0aa373f991d850e83ae0e050fdb4eVirustotal results 45.76%Heodo
2020-08-19inf 20200819.docdoc 5194005835c1f487f14f03ea67a9300ad9821c5d0922e5549321d2629448f630Virustotal results 46.67%Heodo
2020-08-19arc_2020_08_19_U67498.docdoc bed0745c35c33e15125967c2bd9523522638c0a7e10d38d2d100097a5767941bVirustotal results 45.00%Heodo
2020-08-19Mes_2020_08_19_N6797.docdoc e94bbfc806ca8e6182447d1f10e43d213e234887abec37e993057a77a51e3132Virustotal results 45.00%Heodo
2020-08-19Mes.docdoc 40ba73d22e9dab3b78ab066b7fce42d3bc541832c4d6a8ce3c564f2290c0b308Virustotal results 45.00%Heodo
2020-08-19list_2020_08_19_MCM51835.docdoc 7833c0d39d11142241550af1fa9cb743026dc00c841f79a52d695fd8e9bfdd43Virustotal results 46.67%Heodo
2020-08-19INF-20200819-LB343.docdoc eb36ddd9edb9f64c1d10743135f87875826990fee2cde8abfcc653b1045c9061Virustotal results 46.67%Heodo
2020-08-19REP-20200819-690.docdoc 5df568ab274842e91a3f5717af61fdbe6827249fc71e135fdc493f5177ccac7aVirustotal results 46.67%Heodo
2020-08-18File-2020_08_19-WE254500.docdoc 5644494f53e0f58e39e8c623b06d33e093d920e7728632366beaa74ce3ce75a2Virustotal results 43.33%Heodo
2020-08-18MES-20200819-28439.docdoc 96ff6e1cf0debb38b542d25de485f8bbedbebacc99a76bc427946603266b19b2Virustotal results 43.33%Heodo
2020-08-18FILE-8130519.docdoc f382710578f3df562db77ea613a75d9485ab315f7f8b7e5aa86e8120a0f0bf6dVirustotal results 43.33%Heodo
2020-08-18LIST 2020_08_19 NRP535844.docdoc 8f47cb493376d43a1a8f2ccadec7a4cade6df8e86bf5159d54781451519064c3Virustotal results 44.26%Heodo
2020-08-18ARC-20200819-LZA01841.docdoc 942ccd6baa3b3eea249f01497d82b6835ddf27ab79c9db9561a3f473e05eceaaVirustotal results 43.33%Heodo
2020-08-18MES.docdoc f4b06b5878e6216de2fd744371e3da706006cd0eaab9952e028ed23bdb5b89d6Virustotal results 43.10%Heodo
2020-08-18rep_20200818_4652287.docdoc 38a85f6b82ce5d88a70ee0bc98517b5d3d4f82516e1532a0085c7c843310e350Virustotal results 45.00%Heodo
2020-08-18LIST HFQ24724.docdoc c998c60111b424a9eee08cff17b0f146045209d21d312a0b6b0ca71095697c8fn/aHeodo
2020-08-18FILE 843579.docdoc 81a254ffe9cc5094cfa32cac704d5273a94a9f9f8af621676853247eb6c92be3Virustotal results 44.07%Heodo
2020-08-18DAT_2020_08_18_JZO006.docdoc 52386a3f4ed721abc491a22e4d08ba4497e8392249b04e5fbcdcff39502cb314n/aHeodo
2020-08-18File.docdoc 72d943737f8d648bf65f1f9071ab2656abc7a9095e4bb53f4be92836d49aaca5n/aHeodo
2020-08-18Doc AR340793.docdoc c2c31857eddef908bb15ebce07f54e91a068ffff5b92014fd70c1d5ce8f34cd6Virustotal results 40.00%Heodo
2020-08-18DAT 2020_08_18.docdoc c674ec5f3cdf350eb7768e985c94060f26903274d10b581bab0fc71c730f0179Virustotal results 36.67%Heodo
2020-08-18FILE-8696837.docdoc 4447568080893f02a97ee86ec9e776b6d5b4f7ea644870e130a19f3df9b16667Virustotal results 36.67%Heodo
2020-08-18LIST-9101337.docdoc 220f661d5186fcdd525b47c5a909197b80b076950ab2a2f94b6799328cbd1f19Virustotal results 35.59%Heodo
2020-08-18dat_038.docdoc c2ddfddccb101d4e986562ca370e4c29e0ec7f510f7a657f32d61ae37a173c8dVirustotal results 31.15%Heodo
2020-08-18Arc-20200818-KT4249.docdoc 96c73835686797a5dbc5dbd37ef4a7291b69f848d7ca403c9ab404f4f7f650e7Virustotal results 28.33%Heodo
2020-08-18dat-CT519960.docdoc 84e3d0512943c7f88ed646190a17521f13a3540c2574350e0abceeddd0c18dfeVirustotal results 23.73%Heodo
2020-08-18dat-2020_08_18.docdoc a3d686e64806412716e762358904ec4b07f8d3ba5c22f42fd6463288f544658en/aHeodo
2020-08-18doc 20200818 016465.docdoc 2205e547d23005dd90dfbdb24d868bab2f4d6cc70c025a1825c050812ab27f45Virustotal results 21.67%Heodo
2020-08-18REP-2020_08_18-D102848.docdoc 2d9c3ad3458a6371d8d940be9e5379d3334396576ac0a4cf794f13309056ce6fVirustotal results 21.67%Heodo
2020-08-18Mes_2020_08_18_TV483627.docdoc 6f0f54737b574488c42223ae81bd83ea0da431f0732413951fe4572ca19e6442n/aHeodo
2020-08-18REP 20200818 791.docdoc 35b18dbdea7ae1b3d982973c26626ba8af054713d0479a8c1ad278abc7e8bcf0Virustotal results 21.67%Heodo
2020-08-18dat-2020_08_18-CO159717.docdoc ef82ba7726590c175aa9483782be07ebf1c3ca56839c2a61cbfea1f8a8aae774n/aHeodo
2020-08-18Doc 20200818 C9991.docdoc f9c427a4bfa737b6f93b8d1271eb7c351a78fa1296db93634de337be0479d319Virustotal results 21.67%Heodo
2020-08-18inf-2020_08_18-5614.docdoc 9f1df99d205063984fcebb467c9a0f5e788e1fc90b2e9438d7837423c46faf0eVirustotal results 22.95%Heodo
2020-08-18File-RI753.docdoc b0ac5f239adc62a48ea0931e271da006133cbbb682b536ef44d0df5981aadafcn/aHeodo
2020-08-18MES N32480.docdoc b1a5b0c45a385a514d7ee49f36e2df92b90949faf44927ad0a6540f39686a5f4Virustotal results 21.67%Heodo
2020-08-18inf-20200818-FSK533370.docdoc 6f5f480e18ce00a7072df338b34f7d1140a5829ac041ae1483a6430a8211f81cVirustotal results 22.03%Heodo
2020-08-18DAT-2020_08_18-1333.docdoc f772d8c5c470171c274950041849658441510dcfc5c204154479b17ef410584cn/aHeodo
2020-08-18MES 2020_08_18 LU569.docdoc 07295ca2a5d3946d2553fc0a3e140872311843c9f6d20130ed5cd7d0f073826an/aHeodo
2020-08-18REP 2985824.docdoc b532ca1d80293700b173d821d788d7f1a27d7a9cbc5b8e83aa351dd69e0fbd5cn/aHeodo
2020-08-18ARC_20200818_3196.docdoc 9b12143b085ad044f054f5080820ffcb76f9c92df51d76173e60c0559001f16bVirustotal results 45.00%Heodo
2020-08-18Inf-20200818-OW9081.docdoc 26919d2560f6e6e4b5c44add2fdda04f676163a1085799bfcacaec874289f126Virustotal results 45.90%Heodo
2020-08-18file.docdoc ce7f5157d0128d0740ec074ee8db6dd03e234c410111f7aa6832f7adc820cfe0Virustotal results 45.90%Heodo
2020-08-18file-20200818-NBY044.docdoc 1b091450a22052f2f93d1729f74b3ceeae074536055865f9e232398acd2f3a7dn/aHeodo
2020-08-18ARC W0379.docdoc 25ee4f3c43b72dc8241940ae6f5418b60bf58dca63bd4a9d08d45bc566b1cef3Virustotal results 45.90%Heodo
2020-08-18INF-2020_08_18-597279.docdoc 2ce679953d8f4a7b2d6d9f47c635d574aa6e6a9ea94154654e1bb1472971f502Virustotal results 45.00%Heodo
2020-08-18MES-20200818.docdoc 4a49fe6ff5e8731a7aa0536b8f0c0dbc5673dae67c35f0141efb3807cb21daddVirustotal results 45.90%Heodo
2020-08-18Doc_5284948.docdoc 85d29d1d7b0defac3d595525d663889a12f7d5388d8bb0a993665335f72bac30n/aHeodo
2020-08-18Rep 2020_08_18 51806.docdoc 23866d5c01d81dae8b6112cf09cb195b3caeab201b8d5b2074c6c01e280d1783Virustotal results 41.38%Heodo
2020-08-18File 2020_08_18 3182177.docdoc 1c62113735e6ddecc264c05212144be5441448de6c9cdc063a1d3ff2494185a7Virustotal results 46.55%Heodo
2020-08-18LIST_2020_08_18_WRK659156.docdoc 9f6acf9a0b1abf9481a13650ecdec0e7a9cb7a4c30938c2ffcca8da0934a96d2n/aHeodo
2020-08-18MES_2020_08_18_IO734.docdoc 1a92578592df96f6bc3c58861c8719f37bd57d2386789d07d319c613fcf2f79bVirustotal results 45.00%Heodo
2020-08-18ARC-2020_08_18-75171.docdoc 046ef2036e93a6cf34529a8ebbb37aa633f1036021511edbee0fd2fac0363770Virustotal results 41.67%Heodo
2020-08-18INF 2020_08_18 U005913.docdoc 78159b47ee6e43a81e5f727e9f01d56700fb22cca0c9f6cde333e91c0130dee3Virustotal results 41.67%Heodo
2020-08-18FILE-2020_08_18-OEZ667.docdoc 403175e425e2a4c0eedf4b7a5fee64bdcb3b6e6929a1aea63dbda7f9a84e8086Virustotal results 41.38%Heodo
2020-08-18ARC-2020_08_18-477.docdoc cbae984f113307015e9a42c646507cd4fecbc37c1ce7ed2fa9d731fdfff7e00fVirustotal results 42.62%Heodo
2020-08-18MES_YKI6063.docdoc 872c0c3578f24be338bcaa8a29f2b157d80a2d3d5e5ecbd33b028bced714c077Virustotal results 41.67%Heodo
2020-08-18mes 2020_08_18 X153102.docdoc 0ffb643d2ef22089512c5de14e1d2f14d5632e77e9f609b1374c79fbe0a788e0n/aHeodo
2020-08-18dat_2020_08_18_956.docdoc 4426143a003042fcf53c32a42cb6e2dfa30ff4dfdf7e2248eb6533df67ac8723Virustotal results 41.67%Heodo
2020-08-18doc-20200818-190361.docdoc e7007d098ff3b77d307fdffbc2b566e6396298bfb9718bd207a8b377aca0b96aVirustotal results 42.62%Heodo
2020-08-18mes 72577.docdoc 716cb0fed68d3999a988461ba151d314310471e1ff5e5267419ad5f378da2150n/aHeodo
2020-08-18REP-20200818-7866997.docdoc 8bbfe9b6aae9ae8cd42ef61b046d0c690f0637f216d5a22d4a5f7911b59469f7Virustotal results 41.67%Heodo
2020-08-18File_MWP438452.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0n/aHeodo
2020-08-18dat_20200818_KGM4707.docdoc fda68ab66880ec8154bdc1a9595ec1f34fbf612ed3e9c9d13c7424ca0df1a5f4Virustotal results 42.37%Heodo